linux/poky.git/meta/recipes-extended/cups, branch halstead/hashclient

cups: use LOCALE_PATHS to split localized HTML templates

2024-02-14T13:53:36+00:00

Localized HTML templates in /usr/share/cups/templates are now part of locale packages. (From OE-Core rev: beb21ac92e95b6f4bf64e4932b154f78e2c6c2ef) Signed-off-by: Jonathan GUILLOT Signed-off-by: Richard Purdie

cups: Add root,sys,wheel to system groups

2023-12-02T17:18:57+00:00

The Cups documentation states: The default contains "admin", "lpadmin", "root", "sys" and/or "system". https://www.cups.org/doc/man-cups-files.conf.html#:~:text=SystemGroup Add root and sys accordingly Also add wheel group. This is required for systems with polkit support in order to control the printer settings with cups-pk-helper. Not only for gnome-control-center, but also when using plain system-config-printer on a system with running polkit, cups-pk-helper would be a required rdepend. (From OE-Core rev: 572fed0ac6dbcf5749e19c7b624826fc30cf301e) Signed-off-by: Markus Volk Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

cups: Upgrade 2.4.6 -> 2.4.7

2023-11-20T15:30:52+00:00

- enable tls by default to fix: | hash.c:16:12: fatal error: gnutls/crypto.h: No such file or directory | 16 | # include Changes in CUPS v2.4.7 (2023-09-20) ----------------------------------- - CVE-2023-4504 - Fixed Heap-based buffer overflow when reading Postscript in PPD files - Added OpenSSL support for cupsHashData (Issue #762) - Fixed delays in lpd backend (Issue #741) - Fixed extensive logging in scheduler (Issue #604) - Fixed hanging of `lpstat` on IBM AIX (Issue #773) - Fixed hanging of `lpstat` on Solaris (Issue #156) - Fixed printing to stderr if we can't open cups-files.conf (Issue #777) - Fixed purging job files via `cancel -x` (Issue #742) - Fixed RFC 1179 port reserving behavior in LPD backend (Issue #743) - Fixed a bug in the PPD command interpretation code (Issue #768) (From OE-Core rev: 0e33d6fc646e76390e5bf8a0f7b38bd15c83729c) Signed-off-by: Markus Volk Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

cups: fix CVE-2023-4504

2023-09-28T11:37:47+00:00

(From OE-Core rev: d359aae352279f865f7dce33be293c3d26623737) Signed-off-by: Lee Chee Yang Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS

2023-07-21T10:52:26+00:00

- Try to add convert and apply statuses for old CVEs - Drop some obsolete ignores, while they are not relevant for current version (From OE-Core rev: 1634ed4048cf56788cd5c2c1bdc979b70afcdcd7) Signed-off-by: Andrej Valek Reviewed-by: Peter Marko Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

cups: upgrade to 2.4.6

2023-07-10T10:36:34+00:00

This resolves CVE-2023-34241. (From OE-Core rev: 829c742b5461c4599d304541e0da0915dc44146c) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

cups: Fix CVE-2023-32324

2023-06-13T21:11:26+00:00

OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow vulnerability in the function `format_log_line` could allow remote attackers to cause a DoS on the affected system. Exploitation of the vulnerability can be triggered when the configuration file `cupsd.conf` sets the value of `loglevel `to `DEBUG`. No known patches or workarounds exist at time of publication. References: https://nvd.nist.gov/vuln/detail/CVE-2023-32324 https://security-tracker.debian.org/tracker/CVE-2023-32324 Upstream Patch: https://github.com/OpenPrinting/cups/commit/fd8bc2d32589 (From OE-Core rev: a4bdbc82f7e5cc9a5cb603cb720f09b0216b0a0e) Signed-off-by: Sanjay Chitroda Signed-off-by: Richard Purdie

cups: add/fix web interface packaging

2023-03-11T00:08:40+00:00

cups includes a web server. Users can surf to port 631 (default) of a machine running cups to (potentially, based on configuration, default off) view jobs, add printers, and perform other forms of administration. The location of the various resources that are used by the built-in web server (e.g. index.html) are installed under ${datadir}/doc/cups. By default these artifacts would be included in the ${PN}-doc package. The comments in this recipe, however, would suggest an attempt was made to have them added to ${PN}; albeit unsuccessfully. These resources add roughly 1.8M to an image. Since cups does include a configuration option to disable the web interface (--enable-webif), add a PACKAGECONFIG (default off) to allow the user to decide whether or not they would like the web interface configured and its pieces added to the image. Enabling this PACKAGECONFIG both enables the web interface to be configured and built into cups, and also adds (by way of a recommendation) the web interface package to the image. Considering that the previous intention was not working, defaulting this option to off preserves the existing behaviour. Previously in order to have the web interface data included in an image, a user would have needed to explicitly add the ${PN}-doc package to their image. (From OE-Core rev: 2c9bd267ec532cd86a4a1be1d4e499e2aae89aba) Signed-off-by: Trevor Woerner Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

cups: check PACKAGECONFIG for pam feature

2023-03-11T00:08:40+00:00

The cups' PACKAGECONFIG is populated based on DISTRO_FEATURES, but a user is free to enable or disable PACKAGECONFIGs at will. In theory it is possible that pam is enabled globally in DISTRO_FEATURES but disabled in cups' PACKAGECONFIG. Checking the PACKAGECONFIG to determine whether or not pam is enabled would be a safer check rather than relying on DISTRO_FEATURES. (From OE-Core rev: a053dd177ddc99ced11e68914079be0ffe261262) Signed-off-by: Trevor Woerner Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

cups: use BUILDROOT instead of DESTDIR

2023-03-11T00:08:40+00:00

The cups documentation is clear that the correct way to install into an alternate root directory is to use the BUILDROOT variable. From INSTALL.md: Use the `BUILDROOT` variable to install to an alternate root directory: make BUILDROOT=/some/other/root/directory install DESTDIR works, but we should use the mechanism the project specifically created for this purpose. (From OE-Core rev: f8fc70674e0ea5df46969a06da62f8ed135cae4e) Signed-off-by: Trevor Woerner Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie